Secure Remote Access to Monero Node Using Tailscale VPN

Q: What VPN solution are we using to securely access the Monero node remotely?

A: We use Tailscale, a user-friendly mesh VPN based on WireGuard, to create a secure, private network between your devices.

Q: How do I install Tailscale on my DietPi (Monero) server?

A: Run this command on the DietPi terminal to install Tailscale:

curl -fsSL https://tailscale.com/install.sh | sh

Q: How do I start and enable Tailscale service on DietPi?

A: After installation, start the service and enable it to run at boot:

sudo systemctl enable --now tailscaled

Q: How to authenticate and connect the DietPi server to your Tailscale network?

A: Run this to authenticate:

sudo tailscale up

Q: How do I check that my DietPi server is connected to the Tailscale network?
A: Use the status command:

tailscale status

You should see your DietPi listed with its Tailscale IP address.

Q: How to install Tailscale on your local Mac (or other client machine)?

A: Download the Tailscale app from tailscale and install it. Then sign in with the same Tailscale account you used for the server.

Q: How do I confirm the local machine is connected and can reach the DietPi server?

A: On your Mac terminal, ping the DietPi Tailscale IP:

ping <dietpi-tailscale-ip>
Replace <dietpi-tailscale-ip> with the actual Tailscale IP you see in tailscale status.

Q: How do I connect my Monero wallet CLI on my Mac to the remote monerod daemon over Tailscale?

A: Use the remote daemon IP and port in your wallet CLI command:

./monero-wallet-cli --wallet-file /path/to/yourwallet --daemon-address <dietpi-tailscale-ip>:18081 --trusted-daemon

Q: What if I encounter connection errors or timeouts?

A: Verify:

• The monerod daemon is running and listening on 0.0.0.0:18081 on DietPi.

• Firewall rules on DietPi allow incoming connections on port 18081.

• Tailscale network shows both devices connected.

• You can ping and nc (netcat) test the port from your local machine.

Q: How to stop or disable Tailscale on DietPi if needed?

A:

sudo systemctl stop tailscaled
sudo systemctl disable tailscaled